ABSTRACT OF THE DISCLOSURE 

A communication-information acquisition section 240a acquires 
information related to a traffic and communication address of a 
communication packet based on setting information related to 
acquisition of information that is stored in setting-data. Worm 
detection section makes a judgment of whether a communication is 
executed by a worm based on information acquired by the 
communication-information acquisition section and information related 
to judgment.criteria that is stored in the setting-data and which 
regulates whether the communication is executed by a worm. 
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